47cc30d373e7ab3cc0183fa371672548ef1a2437a008d0b8852438508be86b44

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
06/07/2024, 21:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

29600b39635d243e07dc58defc23f495_JaffaCakes118.html
Size

16KB
MD5

29600b39635d243e07dc58defc23f495
SHA1

510aaa3365e8513302b170cd61fddd0daaf9c45b
SHA256

47cc30d373e7ab3cc0183fa371672548ef1a2437a008d0b8852438508be86b44
SHA512

d75a2236151fbd1e20fb8595da892273a3b7e5dbaf0aadb1a100b781afb9021f9d15cd162cd5a70cc70007238cd1a73929a4590fe7ba871b65545ed68a2613ae
SSDEEP

384:IFbcc7d0RUg4bkh/PXtha+C8kn5jEsLpH30+/bFLl+kejHyx2V:Zc7d0RL4g0++j2oOke2y

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3680	msedge.exe
3680	msedge.exe
4320	msedge.exe
4320	msedge.exe
4960	identity_helper.exe
4960	identity_helper.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4320 wrote to memory of 4492	4320	msedge.exe	82
PID 4320 wrote to memory of 4492	4320	msedge.exe	82
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 1104	4320	msedge.exe	83
PID 4320 wrote to memory of 3680	4320	msedge.exe	84
PID 4320 wrote to memory of 3680	4320	msedge.exe	84
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85
PID 4320 wrote to memory of 2172	4320	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\29600b39635d243e07dc58defc23f495_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xd8,0x100,0x104,0xe4,0x108,0x7ffce25146f8,0x7ffce2514708,0x7ffce2514718
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2952 /prefetch:8
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4104 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3996 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,1936238116301795967,7575246685964414039,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3160 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4940

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3092

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
de1d175f3af722d1feb1c205f4e92d1e

SHA1
019cf8527a9b94bd0b35418bf7be8348be5a1c39

SHA256
1b99cae942ebf99c31795fa279d51b1a2379ca0af7b27bd3c58ea6c78a033924

SHA512
f0dcd08afd3c6a761cc1afa2846ec23fb5438d6127ebd535a754498debabd0b1ebd04858d1b98be92faf14b512f982b1f3dcbb702860e96877eb835f763f9734

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
06b496d28461d5c01fc81bc2be6a9978

SHA1
36e7a9d9c7a924d5bb448d68038c7fe5e6cbf5aa

SHA256
e4a2d1395627095b0fa55e977e527ccb5b71dff3cd2d138df498f50f9f5ab507

SHA512
6488a807c978d38d65010583c1e5582548ab8102ebd68ee827e603c9bdfcdbb9f98a488d31414a829409f6edca8bd2eb4aadd4ff31b144de41249fa63a26bc91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
2805ab6654e50ee683bab63835e5aa08

SHA1
35a61c0bfb47efba67e4dbf4451b2891f8d6d58b

SHA256
6970cc954ad09b67ff699ade519ef0a6f7c5fc26e937117900f9ad60ebd8471a

SHA512
740bffe92dba9b2806aa51c47a0f6432638521292009516059aed8ce093148401744850629e3d1d134ef24db34ae98c8a5d1073440b72d504244671562d3e739

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
988179bdafd687ef909e5746d43bcf5d

SHA1
d276e725db05e5e91b07d8348563783903284c28

SHA256
1cc8b36f8801e37342cff506827d2983c126cf6dbab69e4f764988b7dfe58a42

SHA512
5de27c0a5640e4ae8e5f988586b992a7da3d21f4491d8dd304eb811eb38fd233ddf5d718745632696b46bb875a2057d5bfe0d92cded0d4b0847882fa1277553f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a47d76e2f9b8015a3b5c730e7a3e105b

SHA1
3d169b039faa682c0dfb430e423c2dadc87a783f

SHA256
3499d900d70d7bb1ca55b8e61c23cbafaaa47512302f2697ad2b2a1e5a80208d

SHA512
6d4b70cef80399f84dd7ed2cbf8df2095ac5820317435cfcf0228850880c2e1652a58e2ed9866d832daba01839e865e5ea6f2e4fd1715f5b5efb105739cfafc0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
52d4f9e0be0ad50681818dd947570335

SHA1
b5c4c420228b85c1750d377cf46af792b986ceed

SHA256
486d7b08013768333231a029ad522d85cb4e37fb4289f4a24b5d293edae7b215

SHA512
c284a445530d18b562480d3c0f67daae25dc9f38ef27940f83b77a394208ba00a829fb16edb6bd9e7cbbff294bc621b2085f4ff903afe2a4eb688338678a871e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ba917cffab3829cb9845a4ce8e35d0bb

SHA1
2c84d4a0d734eea72c35cd7fc23bc087d68fc669

SHA256
8de05bbe7cdd1334267e15c2e0607175ccd4a38090ce220da8b03473c30bc810

SHA512
e36bae40351c19dff885968f37921756932ab93e291e7f87887b493bc84aa42309b11f97cfba0934e204ad43a30f91ea0be9542abfff29dc7026c4795a7664ac

Download Submit